GO-2026-5269

vendorUSosv

Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size in volcano.sh/volcano

view advisory published 2026-06-25Licence: per source

Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size in volcano.sh/volcano

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-44247UShigh7.4—
Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bo…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan